Creedmoor Sports, Inc.

The Maine Office of the Attorney General reported a data breach involving Creedmoor Sports, Inc. on July 21, 2023. The breach occurred when an unauthorized party accessed the e-commerce platform CommerceV3's systems between November 24, 2021, and December 14, 2022, potentially affecting 53 Maine residents and a total of 14,047 individuals. The compromised information included names, email addresses, billing addresses, payment card numbers, CVV codes, and expiration dates.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9108e6ce-c6cc-4c0e-857f-612c635c39dd.shtml

TPRM report: https://www.rankiteo.com/company/creedmoor-sports-inc-

"id": "cre219072725",
"linkid": "creedmoor-sports-inc-",
"type": "Breach",
"date": "11/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 14047,
                        'industry': 'E-commerce',
                        'name': 'Creedmoor Sports, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 14047,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'email addresses',
                                              'billing addresses',
                                              'payment card numbers',
                                              'CVV codes',
                                              'expiration dates']},
 'date_detected': '2023-07-21',
 'date_publicly_disclosed': '2023-07-21',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Creedmoor Sports, Inc. on July 21, 2023. The '
                'breach occurred when an unauthorized party accessed the '
                "e-commerce platform CommerceV3's systems between November 24, "
                '2021, and December 14, 2022, potentially affecting 53 Maine '
                'residents and a total of 14,047 individuals. The compromised '
                'information included names, email addresses, billing '
                'addresses, payment card numbers, CVV codes, and expiration '
                'dates.',
 'impact': {'data_compromised': ['names',
                                 'email addresses',
                                 'billing addresses',
                                 'payment card numbers',
                                 'CVV codes',
                                 'expiration dates'],
            'payment_information_risk': True,
            'systems_affected': ["CommerceV3's systems"]},
 'references': [{'date_accessed': '2023-07-21',
                 'source': 'Maine Office of the Attorney General'}],
 'threat_actor': 'Unauthorized Party',
 'title': 'Creedmoor Sports, Inc. Data Breach',
 'type': 'Data Breach'}